Cisco IOS XE Software Privileged EXEC Mode Root Shell Access Vulnerability

According to its self-reported version, Cisco IOS XE Software is affected by a vulnerability in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to gain access to the underlying Linux shell of an affected device and execute arbitrary commands with root privileg...

Pair of Cisco Bugs, One Unpatched, Affect Millions of Devices

Cisco has disclosed an unpatched, high-severity vulnerability that impacts millions of devices, in the logic that handles access control to one of the hardware components in Cisco’s proprietary Secure Boot implementation. Cisco has also disclosed a similarly widely-impacting high-severity bug tha...

Input validation

A vulnerability in the web-based user interface Web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to execute commands on the underlying Linux shell of an affected device with root privileges. The vulnerability occurs because the affected software improperly sanitizes...

CVE-2019-1862

CVE-2019-1862 is a vulnerability in the Cisco IOS XE Web UI that allows an authenticated, remote attacker with admin access to execute arbitrary commands as root on the device. It stems from improper sanitization of user-supplied input on a Web UI form, enabling a crafted input parameter to run c...

CVE-2019-1862 Cisco IOS XE Software Web UI Command Injection Vulnerability

A vulnerability in the web-based user interface Web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to execute commands on the underlying Linux shell of an affected device with root privileges. The vulnerability occurs because the affected software improperly sanitizes...

Cisco IOS XE Software Web UI Command Injection Vulnerability

A vulnerability in the web-based user interface Web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to execute commands on the underlying Linux shell of an affected device with root privileges. The vulnerability occurs because the affected software improperly sanitizes...

Rockwell Automation Stratix Ethernet Switches < 15.3 IOS DHCP Reload DOS

Binary data 720230.prm...

Cisco IOS XE Software Arbitrary File Upload Vulnerability

According to its self-reported version, Cisco IOS XE Software is affected by a vulnerability in the web UI framework of Cisco IOS XE Software could allow an authenticated, remote attacker to make unauthorized changes to the filesystem of the affected device.The vulnerability is due to improper...

Cisco IOS and IOS XE Software Cluster Management Protocol Denial of Service Vulnerability

According to its self-reported version, Cisco IOS XE Software is affected by A vulnerability in the Cluster Management Protocol CMP processing code in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to trigger a denial of service DoS condition on an...

Cisco IOS XE Software for Cisco Catalyst Switches IPv4 Denial of Service Vulnerability

According to its self-reported version, Cisco IOS XE Software is affected by a vulnerability in the IP Version 4 IPv4 processing code of Cisco IOS XE Software running on Cisco Catalyst 3850 and Cisco Catalyst 3650 Series Switches could allow an unauthenticated, remote attacker to cause high CPU...

Cisco IOS XE Router Model Detection

Binary data 700537.prm...

Cisco IOS XE Router Version Detection

Binary data 700538.prm...

Cisco IOS-XE Device Detection

Binary data 700531.prm...

The vulnerability in the Cisco IOS XE operating system’s web interface, related to insufficient validation of input data, allows attackers to execute arbitrary commands.

The vulnerability of the Cisco IOS XE operating system’s web interface is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the Network-Based Application Recognition technology implementation in Cisco IOS and Cisco IOS XE operating systems allows attackers to trigger a service failure.

The vulnerability of the Network-Based Application Recognition technology in Cisco IOS and Cisco IOS XE operating systems exists due to errors in syntactic analysis of DNS packets. Exploiting this vulnerability allows a malicious actor, who has not undergone authentication checks, to trigger a...

The vulnerabilities of Cisco IOS and Cisco IOS XE operating systems, related to errors in processing IP Service Level Agreement packets, allow attackers to trigger service interruptions.

The vulnerability of Cisco IOS and Cisco IOS XE operating systems is related to errors in processing IP Service Level Agreement SLA packets. Exploiting this vulnerability allows a malicious actor to trigger service interruptions using specially crafted packets...

The vulnerability of the Network-Based Application Recognition technology implementation in Cisco IOS and Cisco IOS XE operating systems allows attackers to trigger a service failure.

The vulnerability of the Network-Based Application Recognition technology in Cisco IOS and Cisco IOS XE operating systems exists due to errors in syntactic analysis of DNS packets. Exploiting this vulnerability allows a malicious actor, who has not undergone authentication checks, to trigger a...

The vulnerability in the implementation of the Performance Routing Protocol Version 3 on the Cisco IOS XE operating system allows a attacker to cause a service failure.

The vulnerability of the Performance Routing Protocol Version 3 PfRv3 implementation in the Cisco IOS XE operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending specially crafted packets t...

The vulnerability of the Network-Based Application Recognition technology in Cisco IOS and Cisco IOS XE operating systems allows a hacker to trigger a service failure.

The vulnerability of the Network-Based Application Recognition technology in Cisco IOS and Cisco IOS XE operating systems exists due to errors in syntactic analysis of DNS packets. Exploiting this vulnerability allows a malicious actor, who has not undergone authentication checks, to trigger a...

The vulnerability of the Web Services Management Agent web interface of the Cisco IOS XE operating system allows a hacker to execute commands with elevated privileges.

The vulnerability of the Web Services Management Agent component in the Cisco IOS XE operating system exists due to the lack of checks and cleanups for input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with elevated privileges...